Protecting against W3LL Panel hacks, while using Duo MFA

[smeek]

I am reading a lot about a W3LL Panel targeting users and being able to bypass MFA.
View to a Phish: W3LL Specializes in Microsoft 365 Hacking (bankinfosecurity.com)

None of the articles seem to include mitigating the attacks or specific settings to check to ensure protection against MITM attacks. Are there any mitigations out there? Does it target only MS MFA or Duo as well? Any policy settings we should double check?